AGENTS.md@backend/packages/harness/deerflow/sandboxA

AGENTS.md@backend/packages/harness/deerflow/sandbox from bytedance/deer-flow is an AGENTS.md file: the standing instructions coding agents read in that repo.

Install it, pinned
mdr add bytedance/deer-flow/backend/packages/harness/deerflow/sandbox/AGENTS.md@git:20261024.4ec0fe1

Pins git:20261024.4ec0fe1 in mdr.lock. Pin the fingerprint instead.

Audit grade
A, 14 of 14 checks passed
Kind
AGENTS.md file
Repository
bytedance/deer-flow
Path
backend/packages/harness/deerflow/sandbox/AGENTS.md
Versions recorded
46
Latest version
git:20261024.4ec0fe1, committed Oct 24, 2026
First version recorded
Sep 1, 2026
Size
46,601 bytes
Repository stars
84,344
License
MIT

Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.

What the file says

### Sandbox System (`packages/harness/deerflow/sandbox/`)

Sandbox restore requires a thread ID, even forks.

On Linux/macOS, local non-append text saves use `_publish_file_revision` and the shared atomic byte publisher. Check write access without truncation and keep the source descriptor open through metadata transfer. Resolve symlinks under existing mapping rules; publish only regular files. Failure before replace retains the old file and cleans staging. Append and other platforms keep their in-place behavior. Replacement requires parent-directory write and metadata-preservation permissions; inode identity changes, so hard-link aliases retain the old version. It is not concurrent-writer arbitration or power-loss recovery. Regressions: `tests/test_local_sandbox_atomic_writes.py`.
…

Read the whole file at its exact version.

How to install

The exact contents, by fingerprint
mdr add bytedance/deer-flow/backend/packages/harness/deerflow/sandbox/AGENTS.md@sha256:686111af35789fd9

The line at the top of this page pins the label git:20261024.4ec0fe1, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.

Badge

mdr badge

[![mdr](https://markdownregistry.com/badge/art_am5v223aaasv4h6l.svg)](https://markdownregistry.com/a/art_am5v223aaasv4h6l)

5 badge image fetches in 30 days. What the badge shows.

Versions

The registry has recorded 46 versions of this file, between Sep 1, 2026 and Oct 24, 2026, about one every day.

versioncommittedcommitsizeaudit
git:20261024.4ec0fe1 latest2026-10-24 4ec0fe1 46,601 BA view · diff
git:20261023.6e240b42026-10-23 6e240b4 46,346 BA view · diff
git:20261023.871d0642026-10-23 871d064 45,799 BA view · diff
git:20261022.f3efd232026-10-22 f3efd23 45,116 BA view · diff
git:20261018.51352fd2026-10-18 51352fd 44,685 BA view · diff
git:20261018.606db802026-10-18 606db80 44,523 BA view · diff
git:20261018.eae908c2026-10-18 eae908c 44,187 BA view · diff
git:20261018.16d36cc2026-10-18 16d36cc 44,082 BA view · diff
git:20261017.3c08a9f2026-10-17 3c08a9f 43,769 BA view · diff
git:20261013.12397d22026-10-13 12397d2 43,690 BA view · diff
git:20261013.19e02422026-10-13 19e0242 43,622 BA view · diff
git:20261012.9a0ea6a2026-10-12 9a0ea6a 43,194 BA view · diff
git:20261009.b9a75b82026-10-09 b9a75b8 42,296 BA view · diff
git:20261009.8fb44f12026-10-09 8fb44f1 42,120 BA view · diff
git:20261008.49a0e132026-10-08 49a0e13 42,052 BA view · diff
git:20261008.b5d921c2026-10-08 b5d921c 41,962 BA view · diff
git:20261006.67d30f82026-10-06 67d30f8 42,139 BA view · diff
git:20261006.ab126d42026-10-06 ab126d4 42,061 BA view · diff
git:20261005.8237dd72026-10-05 8237dd7 41,856 BA view · diff
git:20261003.68dcaa62026-10-03 68dcaa6 42,127 BA view · diff
git:20261003.9e3589b2026-10-03 9e3589b 41,829 BA view · diff
git:20260927.b63906c2026-09-27 b63906c 42,026 BA view · diff
git:20260926.fa2afa62026-09-26 fa2afa6 42,193 BA view · diff
git:20260926.f2dd1892026-09-26 f2dd189 42,268 BA view · diff
git:20260924.a89cd262026-09-24 a89cd26 42,081 BA view · diff
git:20260923.d3a9c122026-09-23 d3a9c12 42,098 BA view · diff
git:20260923.b6ba7392026-09-23 b6ba739 42,327 BA view · diff
git:20260922.8f08df92026-09-22 8f08df9 42,284 BA view · diff
git:20260922.74f00692026-09-22 74f0069 42,131 BA view · diff
git:20260922.61a99a12026-09-22 61a99a1 41,918 BA view · diff
git:20260922.9ae1e582026-09-22 9ae1e58 42,154 BA view · diff
git:20260920.bd995a62026-09-20 bd995a6 41,870 BA view · diff
git:20260916.d8d110c2026-09-16 d8d110c 41,326 BA view · diff
git:20260916.15a9a872026-09-16 15a9a87 41,990 BA view · diff
git:20260914.93f9ed32026-09-14 93f9ed3 41,760 BA view · diff
git:20260914.ed986a12026-09-14 ed986a1 41,521 BA view · diff
git:20260914.1b9667e2026-09-14 1b9667e 41,334 BA view · diff
git:20260914.18b803f2026-09-14 18b803f 41,177 BA view · diff
git:20260912.3e536942026-09-12 3e53694 41,075 BA view · diff
git:20260909.d8ed8162026-09-09 d8ed816 40,908 BA view · diff
git:20260908.97c68832026-09-08 97c6883 40,937 BA view · diff
git:20260902.037658b2026-09-02 037658b 40,775 BA view · diff
git:20260902.47f43f72026-09-02 47f43f7 41,080 BA view · diff
git:20260902.9e0fbd62026-09-02 9e0fbd6 40,678 BA view · diff
git:20260901.cdc886a2026-09-01 cdc886a 38,467 BA view · diff
git:20260901.45adb8f2026-09-01 45adb8f 38,161 BA view

Audit of the latest version

A  14 of 14 checks passed. Fixed automatic checks with no AI involved, so the same checks give the same answer every run.
  • pass: Size between 200 bytes and 200 KB (46601 bytes)
  • pass: No zero-width or bidi control characters
  • pass: No instruction hidden inside an HTML comment
  • pass: No link to an exfiltration or paste host
  • pass: No credential-shaped string
  • pass: No instruction to send local credentials anywhere
  • pass: No text hidden with inline styles
  • pass: No prompt-injection phrasing
  • pass: No curl or wget piped into a shell
  • pass: No recursive delete of root, home or parent
  • pass: No instruction to read or print local credentials
  • pass: No base64 blob over 200 characters
  • pass: No link to a raw IP address
  • pass: No script tag

Source

GitHub

bytedance/deer-flow · 84,344 stars · license MIT · pushed 2026-10-24 · branch main

API

GET https://markdownregistry.com/api/v1/artifacts/art_am5v223aaasv4h6l
GET https://markdownregistry.com/api/v1/resolve?ref=bytedance/deer-flow/backend/packages/harness/deerflow/sandbox/AGENTS.md
GET https://markdownregistry.com/api/v1/blob/686111af35789fd93e2e1cf9fdcee786fb1b9dde31aa703083e0e2935f11bd90

Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.

Guides: how to write a good AGENTS.md · AGENTS.md vs CLAUDE.md · which agent file does what.

More from bytedance/deer-flow

blocking-io-guard SKILL.md skill
bytedance/deer-flow · .agent/skills/blocking-io-guard/SKILL.md · Ensure async-path backend code that could block the asyncio event loop is protected by a teeth-verified runtime anchor…
git:20260612.dc2abab · audit A · 84,344 stars
deerflow-maintainer-orchestrator SKILL.md skill
bytedance/deer-flow · .agent/skills/deerflow-maintainer-orchestrator/SKILL.md · Use when a DeerFlow maintainer needs comment-only GitHub issue or PR handling: resolve issue/PR scopes with gh, analyze…
git:20260616.65fab1d · audit A · 84,344 stars
engineer-system-change SKILL.md skill
bytedance/deer-flow · .agent/skills/engineer-system-change/SKILL.md · Evaluate and carry out non-trivial software-system changes from first principles. Use when assessing RFCs, issues…
git:20260723.2af2fb5 · audit A · 84,344 stars
smoke-test SKILL.md skill
bytedance/deer-flow · .agent/skills/smoke-test/SKILL.md · End-to-end smoke test skill for DeerFlow. Guides through: 1) Pulling latest code, 2) Docker OR Local installation and…
git:20260619.525ec0a · audit A · 84,344 stars
AGENTS.md AGENTS.md file
bytedance/deer-flow · AGENTS.md
git:20261020.2c880a3 · audit A · 84,344 stars
CLAUDE.md CLAUDE.md file
bytedance/deer-flow · CLAUDE.md
git:20260625.ff7ecdb · audit B · 84,344 stars
AGENTS.md@backend AGENTS.md file
bytedance/deer-flow · backend/AGENTS.md
git:20261022.c0ba948 · audit A · 84,344 stars
CLAUDE.md@backend CLAUDE.md file
bytedance/deer-flow · backend/CLAUDE.md
git:20260625.ff7ecdb · audit B · 84,344 stars
AGENTS.md@backend/app/channels AGENTS.md file
bytedance/deer-flow · backend/app/channels/AGENTS.md
git:20261019.085924a · audit A · 84,344 stars
AGENTS.md@backend/app/gateway AGENTS.md file
bytedance/deer-flow · backend/app/gateway/AGENTS.md
git:20261019.085924a · audit A · 84,344 stars
AGENTS.md@backend/app/gateway/routers AGENTS.md file
bytedance/deer-flow · backend/app/gateway/routers/AGENTS.md
git:20261023.e1a7cba · audit A · 84,344 stars
AGENTS.md@backend/packages/harness/deerflow AGENTS.md file
bytedance/deer-flow · backend/packages/harness/deerflow/AGENTS.md
git:20261021.ab43439 · audit A · 84,344 stars

Every file in bytedance/deer-flow

Browse by kind, by grade A, or by owner.